🇺🇸
Psycho Solutions LLC
2026-02-25 15:29:57
(3 months ago)
Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-json/wp/v2/users - User A ...
show more
Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-json/wp/v2/users - User Agent: N/A - Timestamp: 2/25/2026 3:29 pm (UTC-6)
show less
Web App Attack
Bad Web Bot
Web Spam
Hacking
🇬🇧
Bytemark
2026-02-25 14:09:49
(3 months ago)
45.80.107.13 - - [25/Feb/2026:14:09:47 +0000] "GET /wp-login.php HTTP/1.1" 404 47 "https://www.googl ...
show more
45.80.107.13 - - [25/Feb/2026:14:09:47 +0000] "GET /wp-login.php HTTP/1.1" 404 47 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
45.80.107.13 - - [25/Feb/2026:14:09:48 +0000] "GET /wp-login.php HTTP/1.1" 404 47 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
45.80.107.13 - - [25/Feb/2026:14:09:48 +0000] "GET /wp-login.php HTTP/1.1" 404 47 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
show less
Brute-Force
Web App Attack
🇹🇷
rtbh.com.tr
2025-12-26 20:10:40
(5 months ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
2025-12-26 01:32:08
(5 months ago)
2025-12-26T02:27:08.591387+01:00 ns.almogavers.net auth[1407490]: pam_unix(dovecot:auth): authentica ...
show more
2025-12-26T02:27:08.591387+01:00 ns.almogavers.net auth[1407490]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=nazcar rhost=45.80.107.13 user=nazcar
...
show less
Web Spam
Email Spam
Port Scan
Brute-Force
🇨🇭
backslash
2025-11-19 19:00:36
(6 months ago)
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
Bad Web Bot
🇺🇸
TPI-Abuse
2025-10-30 02:38:53
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 45.80.107.13 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 45.80.107.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 29 22:38:48.230959 2025] [security2:error] [pid 16333:tid 16333] [client 45.80.107.13:26453] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||manaplas.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "manaplas.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aQLPuPhR7jvfiWb-V8-5hAAAAA8"], referer: https://manaplas.com/wp-json/wp/v2/users/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-06-28 15:10:34
(11 months ago)
(mod_security) mod_security (id:225170) triggered by 45.80.107.13 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 45.80.107.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 28 11:10:26.959325 2025] [security2:error] [pid 3901710:tid 3901710] [client 45.80.107.13:17191] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||magacine.tv|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "magacine.tv"] [uri "/wp-json/wp/v2/users"] [unique_id "aGAF4lepBdsUKJ_4YffmJQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-01-04 09:49:00
(1 year ago)
Ports: 2077,2078,2082,2083,2086,2087,2095,2096; Direction: 0; Trigger: LF_DISTATTACK
Brute-Force
SSH
🇺🇸
TPI-Abuse
2024-11-27 02:07:11
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 45.80.107.13 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 45.80.107.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 26 21:07:06.231407 2024] [security2:error] [pid 2282848:tid 2282848] [client 45.80.107.13:39185] [client 45.80.107.13] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||nautanet.info|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "nautanet.info"] [uri "/wp-json/wp/v2/users"] [unique_id "Z0Z-ytYvIH4AytLL1USotAAAAAc"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
2024-09-30 23:30:18
(1 year ago)
Automatic report - Vulnerability scan
/RDWeb/Pages/en-US/login.aspx
Web App Attack
🇨🇦
wil.com
2024-09-24 10:44:33
(1 year ago)
GlobalProtect login attempts with user sarchibald.
VPN IP
Brute-Force